I just spent about an hour trying to get my home page changed back to its original. I ran Ad-Aware SE and it found over 30 bugs. It said it was from CoolWeb Search. I put the url in my restricted sites. So I want to know if thats all I should do, it's got the address of:

ww.web-search.com (I left off the extra w for obvious reasons.)

Does anyone know if this is a trojan or what? I ran AVG and it showed nothing. I also ran my Spybot S&D, to no avail. I have Spywareblaster, but wish I could set it to start up as soon as the pc loads, any suggestions?

Ah Coolweb search again
Used to be a real pain with over 1000 variants.
To prevent it installing in future you'll need Spywareblaster from www.javacoolsoftware.com to deflect this pain in the backside (Acts like a firewall)
But first here is the removal program, CoolwebShredder:
www.softpedia.com/public/cat/10/17/10-17-150.shtml
Download link is the Red Button on Left Side (takes about 40 seconds)
or hit this link This is the Main link from the Maker

Install it Press the buttons "Fix>"then "Next>" "Exit" (as they appear in the corner and follow the instructions (Will "blank" your Homepage) but your computer will be rid of this pest Job takes 10 seconds or less!
Only thing you'll have to do is type in the Homepage address again in Internet Options
Keep it for another day ,but if you have SpywareBlaster installed and updated you'll never see it again
Ps SpywareBlaster adds lots of XXX sites to the restricted sites list so it's quite difficult to drop in on these

Thanks Bedstor! I knew it sounded familiar, just haven't heard about it for a while. Will give it a try, I already have Spyware Blaster, wonder why it didn't catch it?

quote:

---

Originally posted by soaringhorse:
I already have Spyware Blaster, wonder why it didn't catch it?

---

Despite installing it Have you enabled the Protection? Quite easy to overlook
Open SpywareBlaster,look on the first page for the Quick Tasks section click on "Enable All Protection"link then on the Bottom link "Download Latest Protection Updates" and hit the button "Check for Updates"on the next page
Then click on the Internet Explorer banner..
You will see the entire list of what is installed If it is in Red text? You have nothing protected! Regardless of what color the text is (Black or Red ) Right click on any item in the box and select from the menu Select All>Select All and click on this, then click the button underneath "Protect Against Checked Items" .This has now fully committed the program .
When you return next time you either hit the "Enable All Protection" link on the front page or do this?
Ps DO take a "System Snapshot" this acts as extra protection should there be a problem
If you are up to date, the items number as of today (11/22/04) on the page is 3231 Last update 11/15/2004

Thanks for helping out, Bedstor! I appreciate it.

So, I got Spywareblaster updated, and did as instructed, so hopefully everything is good now.

Strangest thing, I went to my email server, through my broadband....I don't even use outlook express, and there are two emails with (no subject) and (no address) in the header. How can that be? I didn't open it, because my server doesn't have a snead preview window. But do they think I'm stupid or what? How can someone send email, without their address line? I deleted it, of course.

Puzzler??
99% certain it is spammy so long as you didn't open it you are safe
If it's genuine it should have a Header/return address